mirror of
https://github.com/geerlingguy/ansible-role-certbot.git
synced 2026-08-25 01:05:36 +02:00
Fixes #39 adding new script for webroot
Fixes #41 support deployhook (webroot only) Fixes #41 support for test CA
This commit is contained in:
committed by
Simon Spannagel
parent
027af9b3b3
commit
23f593aaaf
@@ -5,6 +5,9 @@ certbot_auto_renew_user: "{{ ansible_user | default(lookup('env', 'USER')) }}"
|
||||
certbot_auto_renew_hour: "3"
|
||||
certbot_auto_renew_minute: "30"
|
||||
certbot_auto_renew_options: "--quiet --no-self-upgrade"
|
||||
certbot_testmode: false
|
||||
certbot_hsts: false
|
||||
|
||||
|
||||
# Parameters used when creating new Certbot certs.
|
||||
certbot_create_if_missing: false
|
||||
@@ -19,6 +22,8 @@ certbot_certs: []
|
||||
# - example3.com
|
||||
certbot_create_command: >-
|
||||
{{ certbot_script }} certonly --standalone --noninteractive --agree-tos
|
||||
--{{ certbot_create_method }} {{ certbot_webroot_arg if certbot_create_method == 'webroot' else '' }} {{ '--hsts' if certbot_hsts else '' }}
|
||||
{{ '--test-cert' if certbot_testmode else '' }}
|
||||
--email {{ cert_item.email | default(certbot_admin_email) }}
|
||||
-d {{ cert_item.domains | join(',') }}
|
||||
{{ '--pre-hook /etc/letsencrypt/renewal-hooks/pre/stop_services'
|
||||
@@ -43,3 +48,8 @@ certbot_keep_updated: true
|
||||
|
||||
# Where to put Certbot when installing from source.
|
||||
certbot_dir: /opt/certbot
|
||||
|
||||
# Where the web root is
|
||||
certbot_webroot: "/var/www/html"
|
||||
certbot_webroot_arg: "-w {{ certbot_webroot }}"
|
||||
|
||||
|
||||
Reference in New Issue
Block a user